$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer File: 17B735526DB022F03734B18CC48645C010E4442A.cer (raw, json) Hash identifier: cNPsDKWV9g95iIBcKDWequEW4IAwgQLYmW6ETEuKC0A= Subject key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 11EE4B904F3CCACB6E992D2105D66A944173293E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft caRepository: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 Jul 2026 13:47:26 +0000 Certificate not after: Tue 06 Jul 2027 13:52:26 +0000 Subordinate resources: AS: 263541 IP: 191.5.164.0/22 IP: 191.241.20.0/22 IP: 2804:1398::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 00:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ee:4b:90:4f:3c:ca:cb:6e:99:2d:21:05:d6:6a:94:41:73:29:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 7 13:47:26 2026 GMT Not After : Jul 6 13:52:26 2027 GMT Subject: CN=17B735526DB022F03734B18CC48645C010E4442A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:e8:07:64:bf:7e:fb:f7:91:2c:7c:b4:28: dc:14:81:4a:61:35:cf:2d:17:67:76:76:32:79:60: aa:26:45:19:35:0a:36:f7:e9:2e:c5:58:8e:8e:57: 23:30:f3:46:38:8a:87:a2:eb:90:c7:fe:25:d7:c1: 48:d4:08:10:20:a9:fe:00:4b:6a:2a:0c:bb:87:d5: 94:fa:17:a7:39:87:44:f6:f7:96:55:c3:89:b8:6a: 93:3b:5b:6d:c1:2f:94:5d:70:08:86:e4:77:a0:68: 71:65:e1:d4:20:d3:63:b3:e6:00:04:b4:ff:36:bb: dc:12:e1:9c:6f:23:4f:7d:d7:51:2a:97:d3:93:2e: 0b:54:50:e6:88:f3:9b:53:b3:ef:b9:a8:a9:d9:be: a5:48:be:e5:1b:ed:70:f8:d5:65:58:b6:67:b7:aa: f9:0c:fd:b5:32:8d:68:fa:0c:92:d0:00:13:ad:5d: ac:1a:6c:64:d4:0f:25:bf:96:46:cc:e8:fe:2a:71: 67:87:a4:0e:d6:ec:c1:58:8f:74:03:c6:2c:44:db: b0:7b:f9:7d:42:5c:be:53:cf:8a:d0:9d:da:ea:78: d8:33:62:3b:ea:65:6e:1e:26:7f:58:de:f9:f7:e6: b8:df:e2:59:18:90:72:69:15:8b:ae:83:5b:61:93: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.5.164.0/22 191.241.20.0/22 IPv6: 2804:1398::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263541 Signature Algorithm: sha256WithRSAEncryption 92:5b:fc:0e:22:9e:6e:fb:b0:49:a8:61:4a:ce:e6:1c:31:3e: da:6b:98:78:53:3b:3d:a0:02:42:34:78:fa:8d:99:30:1e:3e: 02:41:b1:2c:85:bd:cf:7f:6d:31:17:b1:fd:e0:66:2d:09:d7: 16:5c:94:3a:41:31:be:fa:64:bd:2c:1c:fb:be:01:e2:ac:0a: 02:c6:8c:7d:91:cb:64:50:7e:c1:9b:50:cf:2b:08:32:31:dd: 12:86:f5:4d:4e:cd:2f:d7:1a:34:cd:23:0c:9f:a3:85:7a:91: b9:99:2d:9b:d1:55:eb:2d:5b:e7:24:b4:54:a4:40:21:33:13: 16:da:94:ba:d9:fe:8b:85:6f:a7:9d:34:c4:3e:cd:39:8a:fd: 5b:63:df:46:5c:ff:33:51:04:d1:87:2f:dd:10:3e:6a:fd:0a: b8:4b:00:06:84:38:4c:2e:4e:6b:3c:64:6f:da:95:be:4c:3e: 05:65:ee:68:7d:13:c6:9a:ba:20:ec:0a:ac:7a:f7:3a:fd:79: 0b:54:3e:a1:9b:7d:1c:da:6c:16:66:42:e1:d7:01:7e:d4:e0: bb:2d:88:5c:c9:ea:80:e9:6a:47:42:60:01:9b:f8:dd:1b:d1: 68:87:c8:89:6d:10:3b:dc:93:f0:10:94:f6:3e:9e:74:c7:58: fd:58:59:65 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEe5LkE88ystumS0hBdZqlEFzKT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MDcxMzQ3MjZaFw0yNzA3MDYxMzUyMjZaMDMxMTAvBgNV BAMTKDE3QjczNTUyNkRCMDIyRjAzNzM0QjE4Q0M0ODY0NUMwMTBFNDQ0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAugHZL9++/eRLHy0KNwUgUph Nc8tF2d2djJ5YKomRRk1Cjb36S7FWI6OVyMw80Y4ioei65DH/iXXwUjUCBAgqf4A S2oqDLuH1ZT6F6c5h0T295ZVw4m4apM7W23BL5RdcAiG5HegaHFl4dQg02Oz5gAE tP82u9wS4ZxvI09911Eql9OTLgtUUOaI85tTs++5qKnZvqVIvuUb7XD41WVYtme3 qvkM/bUyjWj6DJLQABOtXawabGTUDyW/lkbM6P4qcWeHpA7W7MFYj3QDxixE27B7 +X1CXL5Tz4rQndrqeNgzYjvqZW4eJn9Y3vn35rjf4lkYkHJpFYuug1thk2vHAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXtzVSbbAi8Dc0 sYzEhkXAEOREKjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2lh enB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6U1UvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Np YXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAvMTdC NzM1NTI2REIwMjJGMDM3MzRCMThDQzQ4NjQ1QzAxMEU0NDQyQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCvwWkAwQCv/EUMA0EAgACMAcDBQAoBBOYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFdTANBgkqhkiG9w0BAQsFAAOCAQEAklv8DiKe bvuwSahhSs7mHDE+2muYeFM7PaACQjR4+o2ZMB4+AkGxLIW9z39tMRex/eBmLQnX FlyUOkExvvpkvSwc+74B4qwKAsaMfZHLZFB+wZtQzysIMjHdEob1TU7NL9caNM0j DJ+jhXqRuZktm9FV6y1b5yS0VKRAITMTFtqUutn+i4Vvp500xD7NOYr9W2PfRlz/ M1EE0Ycv3RA+av0KuEsABoQ4TC5Oazxkb9qVvkw+BWXuaH0Txpq6IOwKrHr3Ov15 C1Q+oZt9HNpsFmZC4dcBftTguy2IXMnqgOlqR0JgAZv43RvRaIfIiW0QO9yT8BCU 9j6edMdY/VhZZQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:01:01 2026 by rpki-client